RE: [PHP] storing passwords in $_SESSION
| From: | Dan Brow | Date: | Mon, 10 Oct 2005 19:14:01 +0000 |
| Subject: | RE: [PHP] storing passwords in $_SESSION | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-223843@lists.php.net to get a copy of this message | ||
Well, um. ya. Back to the drawing board. Save it in a cookie?
On Mon, 2005-10-10 at 14:59 -0400, Kilbride, James wrote:
> If the session expired.. how will session hold their user id??
>
> > -----Original Message-----
> > From: Dan Brow [mailto:dan@fullmotions.com]
> > Sent: Monday, October 10, 2005 3:05 PM
> > To: PHP-Users
> > Subject: Re: [PHP] storing passwords in $_SESSION
> >
> > Thanks, figured that would be the case. Can't for life of me
> > think why I wanted to do that, must have had a brain
> > infarction. I want to have an expired session prompt so
> > people can log back in with out having to start at the login
> > page. Would having the users login saved in $_SESSION be
> > alright? prompt them for their password and compare it with
> > the password in the DB be fine? I want to reduce the amount
> > of typing someone has to do when a session expires.
> >
> > Thanks.
> >
> > --
> > PHP General Mailing List (http://www.php.net/) To
> > unsubscribe, visit: http://www.php.net/unsub.php
> >
> >